Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa
File:                     IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa (raw, json)
Hash identifier:          FWNvBvGyrYr6QBDwf802RjeZhTSFfzKtYKuXY8CgspM=
Subject key identifier:   21:83:0E:5D:45:C7:75:FA:A9:2A:3C:A4:CD:07:5E:01:D5:8B:70:9E
Certificate issuer:       /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial:       019CA8809C7117BD2AB5F99D44B7C2FDE185
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa
Signing time:             Sun 01 Mar 2026 08:25:26 +0000
ASPA not before:          Sun 01 Mar 2026 08:25:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215561
Providers:                AS: 34872
                          AS: 34927
                          AS: 44103
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:80:9c:71:17:bd:2a:b5:f9:9d:44:b7:c2:fd:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
        Validity
            Not Before: Mar  1 08:25:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21830e5d45c775faa92a3ca4cd075e01d58b709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:0b:07:32:a4:d1:3c:60:f8:05:b8:66:a1:
                    d6:21:9d:ce:72:44:c9:19:14:3a:5f:84:7f:51:17:
                    8a:8e:ae:0f:61:15:c9:b1:6b:b3:21:20:06:77:b7:
                    c0:cd:6a:ee:92:bf:1b:55:06:1b:0a:c3:d8:a1:dc:
                    50:1d:62:cf:b2:8b:ed:13:f1:ff:c0:32:7b:92:89:
                    32:7b:86:2f:7c:0b:48:24:88:d1:9a:40:53:82:d6:
                    90:63:e3:27:59:d7:eb:77:3c:bc:f0:01:53:1a:32:
                    3a:60:24:7e:df:c2:1b:6a:98:82:73:0d:8a:7e:5f:
                    35:c0:f7:2a:1c:37:39:37:5e:f7:84:4b:4c:5a:e0:
                    8b:17:4a:77:3a:35:a8:f3:f2:71:1b:e7:9f:ab:43:
                    99:7d:9c:71:c3:b3:3f:02:9d:dd:e8:d0:58:b8:72:
                    48:f0:f5:21:61:6f:cd:bd:98:93:ee:0e:65:39:67:
                    1d:ba:ae:32:9a:ef:e6:54:99:ad:b8:cf:aa:0a:0a:
                    ab:8b:b5:fd:96:2a:23:b3:da:47:59:23:92:47:1b:
                    34:20:ae:e8:a5:5a:4a:61:e6:96:4b:c2:c5:55:38:
                    e9:af:57:3a:e0:0c:cf:1f:a1:70:7f:45:c9:93:af:
                    66:96:da:95:bd:78:86:e2:3c:f7:b4:ff:30:57:69:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:0E:5D:45:C7:75:FA:A9:2A:3C:A4:CD:07:5E:01:D5:8B:70:9E
            X509v3 Authority Key Identifier:
                keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/IYMOXUXHdfqpKjykzQdeAdWLcJ4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215561

    Signature Algorithm: sha256WithRSAEncryption
         27:07:d1:cf:1e:68:a9:f2:e9:04:08:7d:74:e8:9f:c5:a1:71:
         be:28:fb:9f:47:01:ae:ad:6c:be:8f:5a:34:4c:df:85:ba:89:
         28:c9:b0:45:b1:6d:65:ea:eb:e0:9a:bd:99:47:e6:24:27:99:
         78:4c:5f:1e:9f:ab:02:a2:30:ef:f8:4e:81:30:08:c1:11:7a:
         20:da:f7:99:92:f9:12:ca:e3:54:65:c4:c7:c8:24:0d:76:f7:
         d0:1d:47:8e:d9:d0:77:68:66:6b:d8:56:0e:e1:88:62:24:ba:
         c1:d9:be:dc:84:d3:21:25:ed:bb:93:5b:00:66:e4:1c:71:ae:
         e9:79:68:d4:2a:56:d3:48:36:61:d7:bb:81:ef:43:81:7f:64:
         93:6c:54:50:41:12:ff:70:2e:b9:d8:8f:7a:98:dc:31:2e:04:
         a0:85:ce:a7:a5:76:75:e2:3c:0b:67:54:98:cd:97:cd:e4:ba:
         51:f2:75:95:4f:6c:9a:38:6b:35:ee:90:aa:56:c7:96:8d:db:
         a0:e0:d0:65:43:f6:62:4f:2a:fd:82:26:d3:54:3c:c8:89:12:
         fa:bf:c8:77:44:a1:4e:7d:6b:c4:b0:79:e7:ac:55:de:19:0e:
         54:0e:66:83:c8:b7:37:af:88:2c:bc:49:44:49:48:77:c1:e4:
         32:51:35:41
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyogJxxF70qtfmdRLfC/eGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1
Yzc5MWUwHhcNMjYwMzAxMDgyNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTgzMGU1ZDQ1Yzc3NWZhYTkyYTNjYTRjZDA3NWUwMWQ1OGI3MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJsLBzKk0Txg+AW4ZqHWIZ3OckTJ
GRQ6X4R/UReKjq4PYRXJsWuzISAGd7fAzWrukr8bVQYbCsPYodxQHWLPsovtE/H/
wDJ7kokye4YvfAtIJIjRmkBTgtaQY+MnWdfrdzy88AFTGjI6YCR+38IbapiCcw2K
fl81wPcqHDc5N173hEtMWuCLF0p3OjWo8/JxG+efq0OZfZxxw7M/Ap3d6NBYuHJI
8PUhYW/NvZiT7g5lOWcduq4ymu/mVJmtuM+qCgqri7X9liojs9pHWSOSRxs0IK7o
pVpKYeaWS8LFVTjpr1c64AzPH6Fwf0XJk69mltqVvXiG4jz3tP8wV2k/UQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCGDDl1Fx3X6qSo8pM0HXgHVi3CeMB8GA1UdIwQY
MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt
OWRmNzI1MzBiNjY5LzEvSVlNT1hVWEhkZnFwS2p5a3pRZGVBZFdMY0o0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5
LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKCTANBgkqhkiG
9w0BAQsFAAOCAQEAJwfRzx5oqfLpBAh9dOifxaFxvij7n0cBrq1svo9aNEzfhbqJ
KMmwRbFtZerr4Jq9mUfmJCeZeExfHp+rAqIw7/hOgTAIwRF6INr3mZL5EsrjVGXE
x8gkDXb30B1HjtnQd2hma9hWDuGIYiS6wdm+3ITTISXtu5NbAGbkHHGu6Xlo1CpW
00g2Yde7ge9DgX9kk2xUUEES/3AuudiPepjcMS4EoIXOp6V2deI8C2dUmM2XzeS6
UfJ1lU9smjhrNe6QqlbHlo3boODQZUP2Yk8q/YIm01Q8yIkS+r/Id0ShTn1rxLB5
56xV3hkOVA5mg8i3N6+ILLxJRElId8HkMlE1QQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:43 2026 by rpki-client